In the EXAMPLES section of ipa help hbacsvcgroup, the following example is displayed:
EXAMPLES
ipa help hbacsvcgroup
Add a new group to the "login" group: ipa hbacsvcgroup-add --desc="switch users" login ipa hbacsvcgroup-add-member --hbacsvcs=su --hbacsvcs=su-l login
However, nested HBAC service groups are not supported.
The docstring should be fixed accordingly.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=950018
master: 4f47ac9
Metadata Update from @akrivoka: - Issue assigned to akrivoka - Issue set to the milestone: FreeIPA 3.2 - 2013/04-05 (GA)
Login to comment on this ticket.